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Design of self-checking software 

8S Yaii. RC CheynQ •■ ACM SIGPLAM Notices, 1975 • portaLacniorq 
... (Before we can really guarantee the integrity of a program, we have to prove its correctness which 
cannot be achieved for large programs in the present state of the art, Self-checl(ing software is 
primarily used to verify the correct operation of the system during execution time. ... 



Tamper resistant software: An implennentation 
D Aucsmitli Inlorniation Hiding, 1996 • Springer 

... first process some part of a digital signature, then one part of some additional function such as 
checl(ing to see ... If desired, the IVK could verify the integrity of any other software component, in 
addition to the program in which ... Thus, the vulnerability rests on IVK's correct execution. ... 



Control-flow integrity 

■■ " ■'»■■ ■■■■■ ^ ^is ■ v « ■ 

iVl Abadi, M Biidiu, U Erinasson, J •■ Pfoceedinos ol ihe 12th 2005 • poi1aLaci-n,0!-q 
... The CFG in question can be defined by analysis-source- code analysis, binary analysis, or 
execution profiling. ... At the software level, several existing mitigation techniques constrain control 
flow in some way, for example by cliecl(ing stack integrity and validating function ... 
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Oblivious hashing: A stealthy software integrity verification primitive 

Y Chen, 1-^ Venkatesan, Iv^ Cary, R Pang, S Sinlia, M •• Infon'iiailon Hiding, 2002 ^ Springei' 
... Oblivious Hashing: A Stealthy Software Integrity Verification Primitive 401 ... and thus difficult to 
separate without non-trivial effort to run and observe the program s execution repeatedly ... At the 
minimum, there must be stealthy ways for checking and acting upon the execution hashes ... 



Towards the issues in architectural support for protection of software execution SIMJSl pOF] 

W Shi, HNS Lee, C Lu, M Ghosh - ACM SiGARCH Computer 2005 ~ portaLaciTi,org 
... As Yang at al. [1 5] indicates, block cipher based systems can incur substantial performance 
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penalty. Systems using encryption scliemes similar to one-time pad (OTP) and relaxed integrity 
check [1 2, 1 5] are proposed because they support faster software execution. ... 
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A parallelized way to provide data encryption and integrity checking on a processor ,., gllLISM [^'01^ 

R Elbaz, L Torres, G Sassalel P Mmi •• Proceedings of tlie 2006 - portaLaariori] 
... integrity of data stored in off-chip memories of embedded computing systems. Data 
encryption and integrity checking are mandatory to obtain a private and authenticated 
tamper resistant (PTR) environment for software execution. ... 



[HTML] Securing software by enforcing data-flow integrity Mllil^iS. [HMJ 

M Castro, M Gosta, T Harris - ... of the 7lh USENIX Symposium on 2006 - usenix,org 
... The overhead of software implementations of taint checking [ 31 , 16 ] is also significantly higher, 
for example, TaintCheck [ 31 ] ran bzip2 37.2 times slower than without ... We compare the peak 
physical memory usage during execution, as reported by the operating system. ... 
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[CITATION] Hardware-and software-fault tolerance: Definition and analysis of ... 

JC Laprie, J Arlial, C Beoynes, ... - FIGS 17; digesl 1987 - Co^ripy!e^ Society Press of IEEE 
Ciied bv 56- Related aiilcies 



[CITATION] Definition and analysis of hardware-and software-fault- . . . Sl^Jiy, i^'^H 

JC Laprie. J Arlal, C Beounes. K Kanoun, T LAAS- - Computer, 1990 



Control-flow integrity principles, implementations, and applications PSllMy. [^^^^^.1 

M Abadi, M Biidiu, U Eringsson, J ... •■ ACM Transactions on 2009 ■■ poriaLacni.org 
... puter hardware has long been able to prevent execution of data memory, and the latest x86 
processors support this feature. At the software level, several existing mitigation techniques 
constrain control flow in some way, for exam- pie, by checking stack integrity and validating ... 
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